Fortinet NSE7_EFW-6.2 - Fortinet NSE 7 - Enterprise Firewall 6.2 Exam
Page: 2 / 10
Total 49 questions
Question #6 (Topic: Topic 1)
Which three conditions are required for two FortiGate devices to form an OSP adjacency? (Choose three.)
A. OSPF costs match
B. OSPF peer IDs match
C. Hello and dead intervals match
D. OSPF IP MTUs match
E. IP addresses are in the same subnet
Answer: CDE
Question #7 (Topic: Topic 1)
Which two statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)
A. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.
B. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.
C. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.
D. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
Answer: AD
Question #8 (Topic: Topic 1)
Refer to the exhibit, which contains a partial output of an IKE real-time debug.
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-8_1.jpg]
Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-8_1.jpg]
Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?
A. auto-discovery-receiver
B. auto-discovery-forwarder
C. auto-discovery-sender
D. auto-discovery-shortcut
Answer: C
Question #9 (Topic: Topic 1)
What is the diagnose test application ipsmonitor 99 command used for?
A. To enable IPS bypass mode
B. To provide information regarding IPS sessions
C. To disable the IPS engine
D. To restart all IPS engines and monitors
Answer: D
Question #10 (Topic: Topic 1)
Refer to the exhibit, which contains a session table entry.
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-9_1.png]
Which statement about FortiGate inspection of this session is true?
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-9_1.png]
Which statement about FortiGate inspection of this session is true?
A. FortiGate applied proxy-based inspection.
B. FortiGate applied flow-based NGFW policy-based inspection.
C. FortiGate applied flow-based inspection.
D. FortiGate forwarded this session without any inspection.
Answer: A